PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 25

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 25 / 44

  1. CVE-2021-33631kernel: ext4: kernel bug in ext4_write_inline_data_end()
  2. CVE-2021-33630kernel: net/sched: cbs NULL pointer dereference when offloading is enabled
  3. CVE-2021-33624kernel: Linux kernel BPF protection against speculative execution attacks can be bypassed to read arbitrary kernel memory
  4. CVE-2021-33621ruby/cgi-gem: HTTP response splitting in CGI
  5. CVE-2021-33620squid: denial of service in HTTP response processing
  6. CVE-2021-33582cyrus-imapd: Denial of service via string hashing algorithm collisions
  7. CVE-2021-33574glibc: mq_notify does not handle separately allocated thread attributes
  8. CVE-2021-33560libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm
  9. CVE-2021-33516gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services
  10. CVE-2021-33515dovecot: plaintext commands injection
  11. CVE-2021-33503python-urllib3: ReDoS in the parsing of authority part of URL
  12. CVE-2021-33502nodejs-normalize-url: ReDoS for data URLs
  13. CVE-2021-33452nasm: memory leak in nasm_malloc() in nasmlib/alloc.c
  14. CVE-2021-33450nasm: memory leak in nasm_calloc() in nasmlib/alloc.c
  15. CVE-2021-33430numpy: buffer overflow in the PyArray_NewFromDescr_int() in ctors.c
  16. CVE-2021-33294elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service
  17. CVE-2021-33289ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section
  18. CVE-2021-33287ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes
  19. CVE-2021-33286ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string
  20. CVE-2021-33285ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records
  21. CVE-2021-33200kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier
  22. CVE-2021-33198golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents
  23. CVE-2021-33197golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty
  24. CVE-2021-33196golang: archive/zip: malformed archive may cause panic or memory exhaustion
  25. CVE-2021-33195golang: net: lookup functions may return invalid host names
  26. CVE-2021-33194golang: x/net/html: infinite loop in ParseFragment
  27. CVE-2021-33193httpd: Request splitting via HTTP/2 method injection and mod_proxy
  28. CVE-2021-33150kernel: Intel Trace Hub instances may allow escalation of privilege
  29. CVE-2021-33135kernel: Uncontrolled resource consumption in drivers for Intel SGX may lead to DoS
  30. CVE-2021-33120microcode: Out of bounds read for some Intel Atom processors
  31. CVE-2021-33117hw: cpu: information disclosure in Intel® Xeon® Scalable Processors
  32. CVE-2021-33098kernel: Improper input validation in the Intel(R) Ethernet ixgbe driver may allow an authenticated user to potentially enable DoS via local access
  33. CVE-2021-33096kernel: improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may lead to DoS
  34. CVE-2021-33061kernel: insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may lead to DoS
  35. CVE-2021-33037tomcat: HTTP request smuggling when used with a reverse proxy
  36. CVE-2021-33034kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan
  37. CVE-2021-33033kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c
  38. CVE-2021-32815exiv2: DoS due to assertion failure in crwimage_int.cpp
  39. CVE-2021-32810rust-crossbeam-deque: race condition may lead to double free
  40. CVE-2021-32804nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite
  41. CVE-2021-32803nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite
  42. CVE-2021-32792mod_auth_openidc: XSS when using OIDCPreservePost On
  43. CVE-2021-32791mod_auth_openidc: hardcoded static IV and AAD with a reused key in AES GCM encryption
  44. CVE-2021-32786mod_auth_openidc: open redirect in oidc_validate_redirect_url()
  45. CVE-2021-32785mod_auth_openidc: format string bug in the Redis cache implementation
  46. CVE-2021-32762redis: Integer overflow in redis-cli, redis-sentinel on some platforms
  47. CVE-2021-32761redis: integer overflow issues with BITFIELD command on 32-bit systems
  48. CVE-2021-32687redis: Integer overflow issue with intsets
  49. CVE-2021-32675redis: Denial of service via Redis Standard Protocol (RESP) request
  50. CVE-2021-32672redis: Out of bounds read in lua debugger protocol parser
CVE 2021 document archive — Page 25 | PulseLinux